unescapeHtml
Turns the five HTML entities that escapeHtml produces back into the characters they stand for.
| Entity | Becomes |
|---|---|
& | & |
< | < |
> | > |
" | " |
' | ' |
The string is walked once, not replaced five times in a row. Turning & into & first and < into < afterwards would read &lt; as <, where it has to come back as the literal text <.
Only these five entities are recognised, so anything else — ', , ', a numeric entity — is left exactly as it is. unescapeHtml(escapeHtml(text)) therefore always returns the original text.
Parameters
| Name | Type | Required | Default |
|---|---|---|---|
text | stringStringstr | ● | – |
| The string to unescape. An empty or missing value returns an empty string. | |||
Returns
string
String
str
Examples
javascript
unescapeHtml('fred, barney, & pebbles'); // Returns 'fred, barney, & pebbles'
unescapeHtml('<script>alert("x")</script>'); // Returns '<script>alert("x")</script>'
unescapeHtml('it's'); // Returns "it's"
unescapeHtml('&lt;'); // Returns '<'
unescapeHtml(' '); // Returns ' 'dart
unescapeHtml('fred, barney, & pebbles'); // Returns 'fred, barney, & pebbles'
unescapeHtml('<script>alert("x")</script>'); // Returns '<script>alert("x")</script>'
unescapeHtml('it's'); // Returns "it's"
unescapeHtml('&lt;'); // Returns '<'
unescapeHtml(' '); // Returns ' 'python
unescapeHtml('fred, barney, & pebbles') # Returns 'fred, barney, & pebbles'
unescapeHtml('<script>alert("x")</script>') # Returns '<script>alert("x")</script>'
unescapeHtml('it's') # Returns "it's"
unescapeHtml('&lt;') # Returns '<'
unescapeHtml(' ') # Returns ' '